Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230111	6.8	警告	recipes complete website	-	Recipes Website における SQL インジェクションの脆弱性	-	CVE-2006-6220	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230112	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Mermaid モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6217	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230113	7.5	危険	wallpaper	-	Wallpaper Complete Website における SQL インジェクションの脆弱性	-	CVE-2006-6215	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230114	7.5	危険	wallpaper	-	Wallpaper Website の wallpaper.php における SQL インジェクションの脆弱性	-	CVE-2006-6214	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230115	7.5	危険	webwiz	-	Site News の centre.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-6212	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230116	7.5	危険	warhound	-	WarHound General Shopping Cart の item.asp における SQL インジェクションの脆弱性	-	CVE-2006-6206	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230117	5	警告	wabbit	-	Wabbit PHP Gallery の script.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-6185	2012-12-20 18:02	2006-11-30	Show	GitHub Exploit DB Packet Storm

230118	7.5	危険	トレンドマイクロ	-	Trend Micro OfficeScan 用の PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe におけるバッファオーバーフローの脆弱性	-	CVE-2006-6179	2012-12-20 18:02	2006-06-6	Show	GitHub Exploit DB Packet Storm

230119	7.5	危険	トレンドマイクロ	-	Trend Micro OfficeScan 用の PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe におけるバッファオーバーフローの脆弱性	-	CVE-2006-6178	2012-12-20 18:02	2006-05-26	Show	GitHub Exploit DB Packet Storm

230120	7.5	危険	Tiki Software Community Association	-	TikiWiki の tiki-register.php における "スパム通知" を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2006-6168	2012-12-20 18:02	2006-11-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197741	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …	On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may generate a core file and restart while processing SSL traffic with an HTTP/2 full p…	NVD-CWE-noinfo	CVE-2020-5875	2024-11-21 14:34	2020-05-1	Show	GitHub Exploit DB Packet Storm

197742	7.2	HIGH Network	f5	big-ip_access_policy_manager big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager…	On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure…	NVD-CWE-noinfo	CVE-2020-5873	2024-11-21 14:34	2020-05-1	Show	GitHub Exploit DB Packet Storm

197743	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …	On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the …	NVD-CWE-noinfo	CVE-2020-5872	2024-11-21 14:34	2020-05-1	Show	GitHub Exploit DB Packet Storm

197744	7.5	HIGH Network	f5	big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …	On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual servers. The problem can occur when ciphers, which have been blacklisted by th…	NVD-CWE-noinfo	CVE-2020-5871	2024-11-21 14:34	2020-05-1	Show	GitHub Exploit DB Packet Storm

197745	8.8	HIGH Network	thimpress	learnpress	LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection	CWE-89 SQL Injection	CVE-2020-6010	2024-11-21 14:34	2020-05-1	Show	GitHub Exploit DB Packet Storm

197746	5.4	MEDIUM Network	ni-consul	sales_force_assistant	Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2020-5570	2024-11-21 14:34	2020-04-28	Show	GitHub Exploit DB Packet Storm

197747	6.1	MEDIUM Network	cybozu	garoon	Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.	CWE-79 Cross-site Scripting	CVE-2020-5568	2024-11-21 14:34	2020-04-28	Show	GitHub Exploit DB Packet Storm

197748	7.5	HIGH Network	cybozu	garoon	Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu.	CWE-287 Improper Authentication	CVE-2020-5567	2024-11-21 14:34	2020-04-28	Show	GitHub Exploit DB Packet Storm

197749	4.3	MEDIUM Network	cybozu	garoon	Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.	NVD-CWE-noinfo	CVE-2020-5566	2024-11-21 14:34	2020-04-28	Show	GitHub Exploit DB Packet Storm

197750	4.3	MEDIUM Network	cybozu	garoon	Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.	CWE-20 Improper Input Validation	CVE-2020-5565	2024-11-21 14:34	2020-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed